{"push_id":1847991469,"size":6,"distinct_size":6,"ref":"refs/heads/n7.1","head":"4bbcc5ca269652777394378c894b51dccb6e729e","before":"b389377d1f97c336a439ea887bf8b647d41589d1","commits":[{"sha":"59773dc2f213c3e645c7e04881afa0a8e6ffccca","author":{"name":"Phil Weaver","email":"6c7d147c7b48e7c03f01374f638b3b28f80652dc@google.com"},"message":"Make a11y node info parceling more robust\n\nFix a bug where a malformed Parceled representation\nof an AccessibilityNodeInfo could be used to mess with\nBundles as they get reparceled.\n\nBug: 36491278\nTest: Verified that POC no longer works, a11y cts still passes.\nChange-Id: I10f24747e3ab87d77cd1deba56db4526e3aa5441\n(cherry picked from commit 687bb44b437f7bb24dd3dddf072c2f646308e2ca)\n(cherry picked from commit 487d8697333b1e7784394b9cd96cb590b047c513)","distinct":true,"url":"https://api.github.com/repos/kimjisoo/frameworks_base/commits/59773dc2f213c3e645c7e04881afa0a8e6ffccca"},{"sha":"037fe89b14c07224a8e631db4a30b88b79a7d94c","author":{"name":"Ruben Brunk","email":"4717b11481438fc1a3a42d18e3a91dee64e7c037@google.com"},"message":"Fix re-enabling alert window appop after leaving VR mode.\n\nBug: 37526753\nTest: Check that system alert windows appear after leaving VR mode.\n\nChange-Id: I2942b2e2bd30308752367963b7ae896462811d2f\n(cherry picked from commit 2781b41c0eea94ededc0f216aee432838e4224c5)","distinct":true,"url":"https://api.github.com/repos/kimjisoo/frameworks_base/commits/037fe89b14c07224a8e631db4a30b88b79a7d94c"},{"sha":"31a72adc468ad2b08c16ede0a811a02a74db1da6","author":{"name":"Nick Kralevich","email":"9fb1f2f123bed3d2f2ecce5f8d59b4a06d49fd24@google.com"},"message":"system_server: add CAP_SYS_PTRACE\n\nCommit https://android.googlesource.com/kernel/common/+/f0ce0eee added\nCAP_SYS_RESOURCE as a capability check which would allow access to\nsensitive /proc/PID files. system_server uses this capability to collect\nsmaps from managed processes. Presumably this was done to avoid the\nimplications of granting CAP_SYS_PTRACE to system_server.\n\nHowever, with SELinux enforcement, we can grant CAP_SYS_PTRACE but not\nallow ptrace attach() to other processes. The net result of this is that\nCAP_SYS_PTRACE and CAP_SYS_RESOURCE have identical security controls, as\nlong as system_server:process ptrace is never granted.\n\nAdd CAP_SYS_PTRACE to the set of capabilities granted to system_server.\n\nDon't delete CAP_SYS_RESOURCE for now. SELinux has blocked the use of\nCAP_SYS_RESOURCE, but we still want to generate audit logs if it's\ntriggered. CAP_SYS_RESOURCE can be deleted in a future commit.\n\nBug: 34951864\nBug: 38496951\nTest: Device boots, functionality remains identical, no sys_resource\ndenials from system_server.\nChange-Id: I2570266165396dba2b600eac7c42c94800d9c65b\n(cherry picked from commit 3082eb7c7253c62a06aa151a80487a4eabd49914)\n(cherry picked from commit 966619d0ab6950fb6c90127b47d493b4c8617878)","distinct":true,"url":"https://api.github.com/repos/kimjisoo/frameworks_base/commits/31a72adc468ad2b08c16ede0a811a02a74db1da6"},{"sha":"40942aae4a54de0fbac1e502e0f83b4ca982d41a","author":{"name":"Nick Kralevich","email":"9fb1f2f123bed3d2f2ecce5f8d59b4a06d49fd24@google.com"},"message":"ZygoteInit: Remove CAP_SYS_RESOURCE\n\nPlease see commit 3082eb7c7253c62a06aa151a80487a4eabd49914 for an\nexplanation of this change.\n\nThis capability is not used by system_server.\n\nBug: 34951864\nBug: 38496951\nTest: code compiles, device boots, no selinux errors ever reported.\nChange-Id: I4242b1abaa8679b9bfa0d31a1df565b46b7b3cc3\n(cherry picked from commit 35775783fc6609035136184e3843bc743b59945d)\n(cherry picked from commit 4911af2b8ced29dc5035dca301dc80939c9bdab5)","distinct":true,"url":"https://api.github.com/repos/kimjisoo/frameworks_base/commits/40942aae4a54de0fbac1e502e0f83b4ca982d41a"},{"sha":"856e318f93052fb934391c291c07d769663d9a1b","author":{"name":"android-build-team Robot","email":"d1db67c3e1c8f966ac34a6e8d33c6af834112137@google.com"},"message":"Merge cherrypicks of [2310196, 2310339, 2310340, 2310175, 2310320, 2310321, 2310322, 2310323, 2310217, 2310311, 2310349, 2310313, 2310331, 2310314, 2310286, 2310368, 2310383, 2310272, 2310439, 2310317, 2310318, 2310370, 2310352, 2310459, 2310287, 2310384, 2310237, 2310422, 2310440, 2310372, 2310289, 2310374, 2310355, 2310461, 2310423, 2310375, 2310376, 2310385, 2310386, 2310275, 2310462, 2310442, 2310443, 2310539, 2310378, 2310445, 2310238, 2310446, 2310540, 2310335, 2310582, 2310454, 2310659, 2310392, 2310393, 2310437, 2310679, 2310626] into nyc-mr2-release\n\nChange-Id: I16173d8e1efd1935e80bb01b2668763eda0a9314","distinct":true,"url":"https://api.github.com/repos/kimjisoo/frameworks_base/commits/856e318f93052fb934391c291c07d769663d9a1b"},{"sha":"4bbcc5ca269652777394378c894b51dccb6e729e","author":{"name":"kimjisoo","email":"48a859d714687964f02d876b1b156377ae713461@gmail.com"},"message":"Merge tag 'android-7.1.2_r19' into n7.1\n\nAndroid 7.1.2 release 19","distinct":true,"url":"https://api.github.com/repos/kimjisoo/frameworks_base/commits/4bbcc5ca269652777394378c894b51dccb6e729e"}]}
{"actor":{"display_login":"kimjisoo"}}